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^Please add the following new claim 14^ / 



Claim 1/4 (New) The computer program product of claim 2, wherein: 

the classification of the attempted security breach is accomplished by a controller 



r| y unit which is physically distinct from a firewall unit. 
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Please add the following new claim 15~^ ^ 
Claim 1^ (New) The computer program product of claim 1/f, wherein: 
the firewall unit is controlled through a serial datalink from the controller unit. 



REMARKS 

These remarks are in response to the Office Action mailed November 17, 2000, 
having a shortened statutory period for response set to expire February 17, 2001 . A one- 
month extension to expire March 19, 2001 (March 17 and March 18 being a Saturday and 
Sunday, respectively) is requested in a petition filed herewith. 

The amendments to the claims made herein are shown in the attached "Version 
With Markings To Show Changes Made." 

Applicant thanks the Examiner for the clear statement of reasons for the rejection 
of claims 2 through 8.. Also, the statement of reasons for allowance of claim 1 is most 
helpful, and Applicant thanks the Examiner for that, as well. 

Unfortunately, upon closer examination Applicant realizes that the scope of the 
proposed claim 1 is identical to that of claim 1 in the already issued U.S. Patent No. 
6,119,236. Accordingly, Claim 1 has been deleted in this application. 

Regarding the remainder of the claims, Applicant's purpose in filing this present 
application has been to secure the additional protection afforded by "computer program 
product" type claims. Applicant believes that such claims are now well accepted, and offer 
additional protection in that the claimed computer program product need not be actually 
running in a computer for an infringing manufacturer or seller of the product to be in 
violation of the patent. 

Therefore, in order to expedite the issuance of this application, and to avoid further 
controversy, Applicant has herein amended Claim 2 to correspond to the already issued 
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Claim 12 of the above referenced issued patent. The present claim 2 differs from that 
already issued claim in that the present Claim 2 is directed to a "computer program 
product." Similarly, the new claims 9 through 15 correspond to the already issued claims 
13 through 19, but are directed to a "computer program product." The remaining claims 
2, 3 and 5 through 8, as amended, should also now be allowable as further restrictions on 
the allowable claim 2. 



Claims 1 and 4 have been deleted herein, and new claims 9 through 15 have been 
added by amendment herein. Claims 2, 3 and 5 through 15, inclusive, remain in the case. 
Because the only remaining independent claim is a "computer program product" that 
corresponds to an already issued claim, Applicant believes that it, and all of the claims 
depending therefrom, should now be in condition for allowance. 

It is now thought that this application is in complete condition for allowance, and 
such action is respectfully requested Applicant urges the Examiner to call Applicant's 
undersigned counsel should there be any remaining issues. 



I hereby certify that this correspondence is being deposited with the United States Postal Service as first class mail in an envelope 
addressed to the Assistant Commissioner for Patents, Washington, DC 20231 on March 19, 2001 . 



CONCLUSION 



Respectfully submitted, 
HENNEMAN & SAUNDERS 





121 E. 11 Street 
Tracy, California 95376 



Attorney for Applicants 
Registration No. 41,063 
(209) 833-8825 





Date Signed 
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<&/ Version With Markings To Show Changes Made 



Please amend claim 2 to read as follows: 

Claim 2 (amended) A computer program product which includes codes on a 
computer readable medium [wherein codes are being executed by a computer system], 
comprising: 

[a detect code operation wherein known improper code is detected; and 

a detect patterns operational routine wherein a pattern of activity is detected over 

time] 

code for monitoring communications between a local area network and a wide area 
network: 

code for determining, over time, if the communications between the local area 
network and the wide area network contain patterns of activity indicative of an attempted 
security breach: and 

code for generally simultaneously controlling a firewall to selectively block 
communications between the local area network and the wide area network depending 
upon a classification of the attempted security breach . 

Please amend claim 3 to read as follows: 

Claim 3 (Amended) The computer program product of claim 2, and further including: 

code for a weighting operation wherein a weight is assigned to a detected security 
breach. 

Please delete claim 4. 
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Please amend claim 5 to read as follows: 

Claim 5 (Amended) [A] The computer program product [which includes codes on a 
computer readable medium] of claim 2 [wherein codes are being executed by a computer 
system], and further including [comprising]: 

at least one detect operation performed by the codes on the computer readable 
medium wherein a computer security breach is detected; and 

a weighting operation performed by the codes on the computer readable medium 
wherein a weight is assigned according to the importance of the security breach. 

Please amend claim 6 to read as follows: 

Claim 6 (Amended) The computer program product of claim [5] 2, and further including: 
a react operation wherein said firewall is reprogrammed in real time to react to the 
security breach. 

Please amend claim 7 to read as follows: 

Claim 7 (Amended) [A] Ihe computer program product [which includes codes on a 
computer readable medium wherein codes are being executed by a computer system] of 
claim 2, and further including [comprising]: 

at least one detect operation performed by the codes on the computer readable 
medium wherein a computer security breach is detected; and 

a react operation performed by the codes on the computer readable medium wherein 
said firewall is reprogrammed in real time to react to the security breach. 

Please amend claim 8 to read as follows: 

Claim 8 (Amended) The computer program product of claim [7] 2, wherein: 

said react operation reprograms said firewall according to an assigned weight, the 
assigned weight being a function the type of security breach detected. 
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